From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-13.8 required=3.0 tests=BAYES_00, HEADER_FROM_DIFFERENT_DOMAINS,INCLUDES_CR_TRAILER,INCLUDES_PATCH, MAILING_LIST_MULTI,SPF_HELO_NONE,SPF_PASS,URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 83BDCC433E0 for ; Fri, 12 Mar 2021 19:17:57 +0000 (UTC) Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [216.205.24.124]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by mail.kernel.org (Postfix) with ESMTPS id AC3EC64F84 for ; Fri, 12 Mar 2021 19:17:56 +0000 (UTC) DMARC-Filter: OpenDMARC Filter v1.3.2 mail.kernel.org AC3EC64F84 Authentication-Results: mail.kernel.org; dmarc=none (p=none dis=none) header.from=paul-moore.com Authentication-Results: mail.kernel.org; spf=tempfail smtp.mailfrom=linux-audit-bounces@redhat.com Received: from mimecast-mx01.redhat.com (mimecast-mx01.redhat.com [209.132.183.4]) (Using TLS) by relay.mimecast.com with ESMTP id us-mta-571-6MyNw8O-M3aNm8NGMPhYcA-1; Fri, 12 Mar 2021 14:17:53 -0500 X-MC-Unique: 6MyNw8O-M3aNm8NGMPhYcA-1 Received: from smtp.corp.redhat.com (int-mx02.intmail.prod.int.phx2.redhat.com [10.5.11.12]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mimecast-mx01.redhat.com (Postfix) with ESMTPS id D994B760C0; Fri, 12 Mar 2021 19:17:49 +0000 (UTC) Received: from colo-mx.corp.redhat.com (colo-mx01.intmail.prod.int.phx2.redhat.com [10.5.11.20]) by smtp.corp.redhat.com (Postfix) with ESMTPS id 8F9F951C34; Fri, 12 Mar 2021 19:17:49 +0000 (UTC) Received: from lists01.pubmisc.prod.ext.phx2.redhat.com (lists01.pubmisc.prod.ext.phx2.redhat.com [10.5.19.33]) by colo-mx.corp.redhat.com (Postfix) with ESMTP id 2205E1800232; Fri, 12 Mar 2021 19:17:49 +0000 (UTC) Received: from smtp.corp.redhat.com (int-mx03.intmail.prod.int.rdu2.redhat.com [10.11.54.3]) by lists01.pubmisc.prod.ext.phx2.redhat.com (8.13.8/8.13.8) with ESMTP id 12CJHl9j008533 for ; Fri, 12 Mar 2021 14:17:47 -0500 Received: by smtp.corp.redhat.com (Postfix) id 105F210547B5; Fri, 12 Mar 2021 19:17:47 +0000 (UTC) Received: from mimecast-mx02.redhat.com (mimecast05.extmail.prod.ext.rdu2.redhat.com [10.11.55.21]) by smtp.corp.redhat.com (Postfix) with ESMTPS id 0B48810547CE for ; Fri, 12 Mar 2021 19:17:45 +0000 (UTC) Received: from us-smtp-1.mimecast.com (us-smtp-delivery-1.mimecast.com [207.211.31.120]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by mimecast-mx02.redhat.com (Postfix) with ESMTPS id EFB58884362 for ; Fri, 12 Mar 2021 19:17:44 +0000 (UTC) Received: from mail-ej1-f52.google.com (mail-ej1-f52.google.com [209.85.218.52]) (Using TLS) by relay.mimecast.com with ESMTP id us-mta-237-ixh6gHbLPZ2HhUmiHnpNSg-1; Fri, 12 Mar 2021 14:17:42 -0500 X-MC-Unique: ixh6gHbLPZ2HhUmiHnpNSg-1 Received: by mail-ej1-f52.google.com with SMTP id bm21so55403146ejb.4 for ; Fri, 12 Mar 2021 11:17:42 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=h6ZgASB+qgCwfbF/JMCzQzVtFFhgcIqRIrGbjW1M1j4=; b=k+rXEEOz3ey95xqZ5ly+j2Kv7wiUkXhIPZ8HHIaLTFAazAmueq9CYrGr4xRoZixBPN DQjZob5T2QRBcCFVmaGwiWXt8v7AQ7T9mfVzNWQqlBD0BACortNKq8C40i3YYd35Q+2a Y7lYOox/bGfmYgzQAVIDF8sxr6ADKGQD+zTIvDOTUt8pBaKE0EUttUTAwvIUuNZnl7Ua ByxdqMGp3Wzv5Qc2yhxRrtZmjvtIRIkUQ3zK73R9glfZ6+wK0Bs4pS+76IxIYUIenKu6 ZJWL9qkFFmVUskiYe2VH1Wzz9oSXRLWT/Xs0xjPytwKUs1ZRmq9nFoJi+uuyqhPEaCKD ddHw== X-Gm-Message-State: AOAM53311XQvxSPb0osq10eoGzIUhTgz7Hwfw8tCfLg/nZL2svx4+92U PA5S7tVYL1Yo1StZwk4jlKiTIY+Zj2GDTXVkuZse X-Google-Smtp-Source: ABdhPJzHH2v5+ctQq8g6wnqNmWb/FxTzWTC0x5DcPJViB8M2A+CHifCaQwRHgAG3gTocUdthsUA32byzNZZA+oxAlpo= X-Received: by 2002:a17:906:e116:: with SMTP id gj22mr10037529ejb.398.1615576661321; Fri, 12 Mar 2021 11:17:41 -0800 (PST) MIME-Version: 1.0 References: In-Reply-To: From: Paul Moore Date: Fri, 12 Mar 2021 14:17:30 -0500 Message-ID: Subject: Re: [PATCH 2/2] audit: document /proc/PID/sessionid To: Richard Guy Briggs X-Mimecast-Impersonation-Protect: Policy=CLT - Impersonation Protection Definition; Similar Internal Domain=false; Similar Monitored External Domain=false; Custom External Domain=false; Mimecast External Domain=false; Newly Observed Domain=false; Internal User Name=false; Custom Display Name List=false; Reply-to Address Mismatch=false; Targeted Threat Dictionary=false; Mimecast Threat Dictionary=false; Custom Threat Dictionary=false X-Scanned-By: MIMEDefang 2.78 on 10.11.54.3 X-loop: linux-audit@redhat.com Cc: Eric Paris , Linux-Audit Mailing List , LKML X-BeenThere: linux-audit@redhat.com X-Mailman-Version: 2.1.12 Precedence: junk List-Id: Linux Audit Discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com X-Scanned-By: MIMEDefang 2.79 on 10.5.11.12 Authentication-Results: relay.mimecast.com; auth=pass smtp.auth=CUSA124A263 smtp.mailfrom=linux-audit-bounces@redhat.com X-Mimecast-Spam-Score: 0 X-Mimecast-Originator: redhat.com Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit On Thu, Mar 11, 2021 at 11:41 AM Richard Guy Briggs wrote: > > Describe the /proc/PID/loginuid interface in Documentation/ABI/stable that > was added 2008-03-13 in commit 1e0bd7550ea9 ("[PATCH] export sessionid > alongside the loginuid in procfs") > > Signed-off-by: Richard Guy Briggs > --- > Documentation/ABI/stable/procfs-audit_loginuid | 12 ++++++++++++ > 1 file changed, 12 insertions(+) > > diff --git a/Documentation/ABI/stable/procfs-audit_loginuid b/Documentation/ABI/stable/procfs-audit_loginuid > index fae63bef2970..175ee6ec3695 100644 > --- a/Documentation/ABI/stable/procfs-audit_loginuid > +++ b/Documentation/ABI/stable/procfs-audit_loginuid > @@ -13,3 +13,15 @@ Description: > AUDIT_FEATURE_LOGINUID_IMMUTABLE is enabled. It cannot be > unset if AUDIT_FEATURE_ONLY_UNSET_LOGINUID is enabled. > > + > +What: Audit Login Session ID > +Date: 2008-03-13 > +KernelVersion: 2.6.25-rc7 1e0bd7550ea9 ("[PATCH] export sessionid alongside the loginuid in procfs") > +Contact: linux-audit@redhat.com > +Format: u32 > +Users: auditd, libaudit, audit-testsuite, login This should be obvious, but just to be safe - my comment from patch 1/2 also applies here. > +Description: > + The /proc/$pid/sessionid pseudofile is read to get the > + audit login session ID of process $pid. It is set > + automatically, serially assigned with each new login. -- paul moore www.paul-moore.com -- Linux-audit mailing list Linux-audit@redhat.com https://listman.redhat.com/mailman/listinfo/linux-audit